Skip to content
OpenAdvisories
Critical ICSA-23-208-03 1 CVE

Mitsubishi Electric CNC Series (Update E)

Published Jul 27, 2023 · Updated Jan 30, 2024 · Revision 6

Vendor: Mitsubishi Electric Product: C80 (BND-2036W000-**) Product: Data Acquisition Unit (BND-2041W002-**) Product: E70 (BND-1022W000-**) Product: E80 (BND-2009W000-**) Product: M70V (BND-1018W000-**) Product: M730VS/M720VS (BND-1012W000-**) Product: M730VW/M720VW (BND-1015W000-**) Product: M750VS (BND-1012W002-**) Product: M750VW (BND-1015W002-**) Product: M80 (BND-2007W000-**) Product: M800S (BND-2006W000-**) Product: M800VS (BND-2052W000-**) Product: M800VW (BND-2051W000-**) Product: M800W (BND-2005W000-**) Product: M80V (BND-2053W000-**) Product: M80VW (BND-2054W000-**) Product: M80W (BND-2008W000-**) Product: Remote Service Gateway Unit (BND-2041W001-**)

Summary

Successful exploitation of this vulnerability could allow a malicious remote attacker to cause a denial-of-service condition and execute malicious code on the product by sending specially crafted packets. System reset is required for recovery.

Vulnerabilities 1

Revision history

  1. #6

    Update E - Added C80 and versions to Affected Products and Mitigations sections.

  2. #5

    Update D - Added countermeasures to Remote Service Gateway Unit.

  3. #4

    Update C - Updated affected versions in Affected Products section. Added fixed versions for M800/M80V Series and M700V/M70V/E70 Series products in Mitigation section.

  4. #3

    Update B - Corrected Affected versions of M800/M80/E80 Series products, Added fixes for M800/M80/E80 Series products and additional Mitigation information in the Mitigation section.

  5. #2

    Update A - Additional products were added under M700V/M70V/E70 Series

  6. #1

    Initial Publication

References